-
Vitality Group International
June 22, 2023
•
[ leak, sqlinjection, technology ]
Vitality Group International files a notice of data breach after discovering that a vulnerability in a file transfer software used by the company allowed attackers to access certain confidential consumer information. The breach is believed to be related to the MOVEit CVE-2023-34362 Vulnerability.
-
UPS Customers in Canada
June 21, 2023
Multinational shipping company UPS alerts Canadian customers that some of their personal information might have been exposed via its online package look-up tools and abused in phishing attacks.
-
Unknown cryptocurrency exchange located in Japan
June 21, 2023
•
[ espionage, malware, finance ]
Researchers from Elastic reveal that an unknown cryptocurrency exchange located in Japan was the target of an attack to deploy the Apple macOS backdoor called JokerSpy.
-
Telos
June 21, 2023
Telos, a US defense contractor specializing in cybersecurity, says that attackers downloaded its client data by exploiting the MOVEit transfer vulnerability.
-
Omaha Health Insurance Company
June 21, 2023
•
[ leak, misconfiguration, healthcare ]
Omaha Health Insurance Company files a notice of data breach after discovering that an incident at a third-party vendor compromised consumers enrolled in the Medicare Part D Prescription Drug Plan.
-
Undisclosed Ukrainian government entities
June 20, 2023
A joint investigation conducted by Ukraine's Computer Emergency Response Team (CERT-UA) and Recorded Future reveal that the APT28 group, linked to Russia's General Staff Main Intelligence Directorate (GRU), has breached Roundcube email servers belonging to multiple Ukrainian organizations, including government entities, exploiting the vulnerabilities CVE-2020-35730, CVE-2020-12641, and CVE-2021-44026.
-
RadÃÆÃ'Ã'ÃÂ
June 20, 2023
A database with 25,000 records of the Italian jewelry firm Rad'', is published on Breach Forums.
-
Hawaii Community College
June 20, 2023
•
[ ransomware, malware, education ]
Hawaii Community College discloses to be dealing with a ransomware attack.
-
Community Research Foundation
June 20, 2023
Community Research Foundation (CRF) files a notice of data breach, noting that a "Hacking/IT Incident" resulted in the confidential information of 30,057 individuals being leaked.
-
Informatica
June 19, 2023
Software development firm Informatica reports that the Clop ransomware gang campaign obtained some files exploiting the MOVEit CVE-2023-34362 Vulnerability.
-
Colorado Department of Higher Education (CDHE)
June 19, 2023
•
[ ransomware, malware, education ]
The Colorado Department of Higher Education (CDHE) discloses a massive data breach impacting students, past students, and teachers after suffering a ransomware attack in June.
-
Studio Legale Ranchino
June 16, 2023
•
[ ransomware, malware ]
The Studio Legale Ranchino, an Italian law firm suffers a ransomware attack by the 8Base gang.
-
Putnam Investments
June 15, 2023
The Boston-based investment management firm Putnam Investments is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Leggett & Platt
June 15, 2023
•
[ ransomware, malware, manufacturing ]
American manufacturer Leggett & Platt is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Johns Hopkins University
June 15, 2023
The Johns Hopkins University confirms to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
First National Bankers Bank
June 15, 2023
•
[ ransomware, sqlinjection, finance ]
First National Bankers Bank, a U.S.-based financial services organization is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Aurora National Life Assurance Company
June 25, 2023
•
[ leak, misconfiguration, finance ]
Aurora National Life Assurance Company files a notice of data breach after discovering that an incident at a third-party vendor resulted in confidential consumer information being exposed to unauthorized access.
-
Bloom Health Centers
June 23, 2023
Bloom Health Centers identifies suspicious activity in its Microsoft 365 email environment
-
Metro Vancouver Transit Police
June 21, 2023
•
[ hack, sqlinjection, government ]
The Metro Vancouver Transit Police confirms to have suffered a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Maxar Technologies
June 21, 2023
•
[ hack, manufacturing ]
A threat actor with the moniker labs666 active on a Russian-language hacker forum posts an advertisement offering access for sale to a military satellite operated by Maxar Technologies.
